Re: Right to specify what personal data is stored?

On 5 Aug 2005 22:40:30 -0700, "Random Observer"
<nonexistent2032@xxxxxxxxxxx> wrote:

>Hi. Do we have a right to specify to companies what personal data of
>ours they are to store?
>

Not as a general rule, no.

Many people think the Data Protection Act means they can, but they are
wrong.

The DPA does restrict what can be done with the stored data.

>For example, one thing I am uneasy about online transactions with
>companies is that some do not make it clear if they will store your
>credit card data or not.

They do.

They must do. I believe they must keep full records of all
transactions for 6 years.

>
>First off, am I able to request, without cost, that companies disclose
>what type of information they have about me (not necessarily the
>details, just the type of information: e.g. name, address, etc.)?
>

No. You only have the rights conferred by the DPA, which means you
have to pay (up to) £10.

>I know the Data Protection Act states that companies must provide you
>with *all* written records of you, if you request for it and pay them a
>£10 cheque. In this case I am just looking to know what information
>they hold about customers and for how long. I just noticed that a
>company I am a long time customer with held my credit card details
>which expired in 2003. Surely there was no need for them to keep such
>superfluous information?!
>

Yes there was (see above)


>Will I be able to send them an email stating that no data of a
>specified type are to be kept under any circumstances?
>

You can, of course, send such an email. But it would have no force.

>
>Assuming the company agrees to my request to prune information kept
>about me, how do I ensure that the company has complied?
>

Spend another £10 on another DPA Subject Access request.

>What law would the company have broken if they assure me they will do
>so, but continue to keep the data on record? (intentionally and
>unintentionally)
>

Probably none.
--
Alex Heney, Global Villager
Solution: A more subtle problem.

To reply by email, my address is alexATheneyDOTplusDOTcom
.

Relevant Pages

  • Right to specify what personal data is stored?
    ... Do we have a right to specify to companies what personal data of ... companies is that some do not make it clear if they will store your ... First off, am I able to request, without cost, that companies disclose ... they hold about customers and for how long. ...
    (uk.legal)
  • Re: Right to specify what personal data is stored?
    ... Do we have a right to specify to companies what personal data of ... companies is that some do not make it clear if they will store your ... You can request but the company has no legal obligation to reply. ... they hold about customers and for how long. ...
    (uk.legal)
  • Re: ManagementEventWatcher.start=OutOfMemoryException
    ... the target system really didn't have enough memory to service the request... ... I have to specify different user/pass for each machine to ... >>>> ManagementEventWatcher watcher; ...
    (microsoft.public.win32.programmer.wmi)
  • Re: http parameter casting
    ... > This is a web form design discussion. ... > comes through the request as a String but should be stored as an int). ... I've lost what they entered when I tried to parse the date ... That is unless I store all of the user's original ...
    (comp.lang.java.programmer)
  • Re: ViewState: why?
    ... If you don't store the value in the viewstate, ... lost (since each request instanciate a new webform object), ... one of the servers to act as a state server, or you can use SQL Server. ... My opinion is that the viewstate should be use as soon as you have a value ...
    (microsoft.public.dotnet.framework.aspnet)